Privacy Policy

Your personal data confidentiality is one of the main concerns of Mihet Daniela Persoana Fizica Autorizata based in Cluj-Napoca, Romania, as the data controller.

This document aims to inform you about the processing of your personal data in the context of using the website http://wellory.ro, which will be referred to hereinafter as "the site."

Contents

Categories of personal data processed
Purposes and legal grounds for processing
Duration for which your data will be processed
Disclosure of personal data
Transfer of personal data
Your rights
Privacy of minors
Changes to the privacy policy

1. Categories of personal data processed

A. If you are a customer of the site, your personal data will be processed, such as:

First and last name
Phone number
Email address
Billing address
Shipping address
Data related to how you use the site (for example, your behavior/preferences/habits within domains)
As well as any other categories of data you directly provide in the context of creating a user account, placing an order through the site, or in any other way resulting from using the site.

If you create a user account on the site using your Facebook or Google account, the following public profile data displayed by those applications will be processed: username, email address.

If you choose to create a user account only before completing an order for a product available on the site, your email address will be requested, and an account will be automatically created based on that.

If you do not complete the order, the email address and other data provided will not be stored by Mihet Daniela Persoana Fizica Autorizata, and the created account will be automatically deleted.

B. If you are a visitor to the site, your personal data that you provide will be processed:

Directly, in the context of using the site, such as the data you provide in the contact/inquiries/complaints section, to the extent that you contact us in this way.
Indirectly, data such as: IP address, browser used, browsing duration, search history, operating system used, language, and pages viewed, full URLs, clickstream to, through, and from our site, information or products viewed/searched, visit durations on certain pages, interaction data with pages (e.g., scrolling, clicks, mouse movements), user behavior data.

2. Purposes and legal grounds for processing

A. If you are a customer of the site, your personal data will be processed as follows:

For the performance of the contractual relationship between you and Mihet Daniela Persoana Fizica Autorizata, specifically for processing, validating, shipping, and billing the order placed on the site, informing you about the order status, organizing the return of ordered products, etc.
- Legal basis: The processing of your data for this purpose is based on the contract concluded between you and Mihet Daniela Persoana Fizica Autorizata, defined in the Terms and Conditions of wellory.ro/terms-and-conditions. Providing your personal data is necessary to execute this contract. Refusing to provide data may result in the impossibility of carrying out the contractual relationship between you and Mihet Daniela, Authorized Natural Person.
For fulfilling legal obligations in the context of the services provided through the site, including fiscal obligations, as well as archiving.
- Legal basis: The processing of your data for this purpose is necessary due to legal obligations. Providing your data for this purpose is mandatory. Refusing to provide the data may result in the inability to meet the legal obligations and, therefore, the inability to provide the services through the site.
For marketing activities, specifically for sending commercial communications regarding the products and services offered by Mihet Daniela Persoana Fizica Autorizata, via remote communication means (email, SMS).
- Legal basis: The processing of your data for this purpose is based on your consent, if you choose to provide it.
You can express your consent for data processing for this purpose by ticking the corresponding box at the time of account creation, or after creating the account, in the "My Account" section.

To unsubscribe from receiving such commercial communications, you can use the option at the end of each email/SMS containing commercial messages. Additionally, you can unsubscribe by accessing the "My Account" section.

Providing your data for this purpose is voluntary. Refusing to give consent for processing your data for this purpose will not have negative consequences for you.
For conducting various analyses and reports regarding the functioning of the site, creating consumption preference profiles, mainly to improve the user experience on the site.
- Legal basis: The processing of your data for this purpose is based on the legitimate interest of Mihet Daniela Persoana Fizica Autorizata, to continuously improve the customer experience on the site. Providing your data for this purpose is voluntary. Refusing to provide data for this purpose will not have negative consequences for you.

B. If you are a visitor to the site, Mihet Daniela Persoana Fizica Autorizata, processes your personal data as follows:

For marketing activities, specifically for sending commercial communications regarding the products and services offered by Mihet Daniela Persoana Fizica Autorizata, via remote communication means (email, SMS).
- Legal basis: The processing of your data for this purpose is based on your consent, if you choose to provide it.
You can express your consent for data processing for this purpose by completing and ticking the corresponding box in the newsletter subscription form available on the site.

To unsubscribe from receiving such commercial communications, you can use the option at the end of each email/SMS containing commercial messages.

Providing your data for this purpose is voluntary. Refusing to give consent for processing your data for this purpose will not have negative consequences for you.
For handling complaints, inquiries, and monitoring traffic to improve your experience on the site.
- Legal basis: The processing of your data for this purpose is based on the legitimate interest of Mihet Daniela Persoana Fizica Autorizata, to ensure the correct operation of the site and to continually improve the visitor experience, including by addressing various comments, questions, or complaints.
Providing your data for this purpose is voluntary. Refusing to provide data for this purpose will not have negative consequences for you.

3. Duration for which we process your data

Mihet Daniela Persoana Fizica Autorizata, will process your personal data as long as necessary to fulfill the processing purposes mentioned above.

If you are a customer, we will process your data for the entire duration of the contractual relationship and subsequently according to the legal obligations imposed (e.g., for financial-accounting documents, the retention period provided by law is 10 years from the end of the financial year in which they were created).

If you are a customer and choose to delete your user account by clicking the "delete account" button in the "My Account Information" section, we will interpret this action as your decision to unsubscribe from receiving commercial communications that keep you informed about the products and services offered through the site.

In this regard, if you choose to delete your user account, we will no longer send you emails and/or SMS messages of this kind.

However, we would like to inform you that deleting your account will not automatically delete your personal data.

If you wish to stop the processing of your personal data or wish to delete your data, you can exercise your rights as detailed in point 6 below.

If you request account deletion, but there is at least one active order on that account, the account deletion request will only be processed after the products have been delivered and the last active order has been completed.

If you withdraw your consent for data processing for marketing purposes, the processing of your personal data for this purpose will cease, without affecting the processing carried out based on your consent prior to the withdrawal.

4. Disclosure of personal data

We do not rent or sell your personal data to third parties.

In addition to the data controller, in certain situations, data may be accessible to third parties such as service providers, transport operators, hosting providers, IT companies, who are appointed, if necessary, as data processors by the Data Controller.

These third parties are contractually obligated to maintain the confidentiality of the data and to use it exclusively for the purpose for which it was provided.

We may also disclose your personal data to public authorities, both central and local, in the following exemplary situations:

For managing the site
In situations where such disclosure is necessary for awarding prizes or other benefits to the data subjects, obtained as a result of their participation in various promotional campaigns organized through the site;
For maintaining, personalizing, and improving the site and the services provided through it
For conducting data analysis, testing, and research, monitoring usage trends and activity, developing security features, and user authentication
For sending marketing communications, within the conditions and limits prescribed by law
When the disclosure of personal data is required by law, etc.

5. Transfer of personal data

The personal data provided to Mihet Daniela Persoana Fizica Autorizata, may be transferred outside Romania, but only to countries within the European Union.

6. Your rights

Under the provisions of the legislation regarding the processing of personal data, as data subjects, you have the following rights:

Right to information – the right to receive details about the processing activities carried out by Mihet Daniela Persoana Fizica Autorizata, as described in this document;
Right of access to data – the right to obtain confirmation from us regarding the processing of your personal data, as well as details about the processing activities, such as how the data is processed, the purpose of the processing, the recipients or categories of recipients of the data, etc.;
Right to rectification – the right to obtain the correction, without undue delay, of inaccurate/ unjustified personal data, as well as the completion of incomplete data;
Right to erasure of data, without undue delay ("right to be forgotten") – applies under certain conditions. It is possible that, following a request for data deletion, the data may be anonymized (thus removing the personal nature of the data) and continue to be processed for statistical purposes under these conditions;
Right to restrict processing, under certain conditions;
Right to data portability – the right to receive your personal data in a structured, commonly used, and readable format, as well as the right for these data to be transferred to another data controller, provided the legal conditions are met;
Right to object – regarding the processing activities, which can be exercised by submitting a request as indicated below;
- At any time, for reasons related to the particular situation of the data subject, to object to the processing of their data based on the legitimate interest of Mihet Daniela Persoana Fizica Autorizata, or in the public interest, except in cases where we can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or where the purpose is the establishment, exercise, or defense of a legal claim;
- At any time, free of charge and without justification, to object to the processing of their data for direct marketing purposes.
Right not to be subject to an automated individual decision – the right not to be the subject of a decision based solely on automated processing activities, including profiling, which produces legal effects concerning the data subject or similarly significantly affects them;
Right to address the National Authority for the Supervision of Personal Data Processing or competent courts, as necessary.

For any further questions regarding how your personal data is processed and to exercise the rights mentioned above, please contact us at the email address: customer@wellory.ro.

7. Confidentiality of minors

We do not knowingly contact or collect information from individuals under the age of 18. The website is not intended to request any information from individuals under the age of 18.

If, by mistake, we obtain such information and are notified of this, we will obtain appropriate parental consent to use this information, or if that is not possible, we will delete the information from our servers.

If you wish to inform us of receiving information about individuals under 18 years of age, please contact us by email at: customer@wellory.ro.

8. Changes to the privacy policy

We reserve the right to modify this privacy policy. In the event of significant changes in the future, you will be notified by email (if possible) or through a specific message displayed on the website.

This website uses cookie files. For more information on how these files are used, please visit the following link: https://www.wellory.ro/en/cookie-policy.